CVE-2018-6755

moderate-risk
Published 2018-12-06

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.

Do I need to act?

-
0.04% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.2/10 High
LOCAL / HIGH complexity

Affected Products (1)

Affected Vendors

31
/ 100
moderate-risk
Severity 19/34 · Moderate
Exploitability 7/34 · Low
Exposure 5/34 · Minimal